Description
Heap-based buffer overflow in the Sophos Antivirus Library, as used by Sophos Antivirus, PureMessage, MailMonitor, and other products, allows remote attackers to execute arbitrary code via a Visio file with a crafted sub record length.
References
- http://www.rem0te.com/public/images/sophos.pdf
- sophos-bo(21608) vdb-entry
- 16245 third-party-advisory
- 14362 vdb-entry
- http://www.sophos.com/support/knowledgebase/article/3409.html
- 20050826 Sophos Antivirus Library Remote Heap Overflow mailing-list